Found a copy of some of the DBs. ra.pe/linode2.sql
Plain text credit card numbers in the file, usual linode quality.
Linode hacked again?
11–20 of 52 posts
Re: Linode hacked again?
#12Found a copy of some of the DBs. ra.pe/linode2.sql
That is really scary. I mean, yikes. Credit Cards in plain text? In 2014? Come on guys...
Re: Linode hacked again?
#13It looks like this is the same password from the last hack. Did they really not change their passwords?
Same mysql server also appeared to accept * as the password for the root user.
Re: Linode hacked again?
#14Found a copy of some of the DBs. ra.pe/linode2.sql
I can't find anything in that dump dated beyond 2009. Isn't this just the old dump, posted again?
Re: Linode hacked again?
#15Found a copy of some of the DBs. ra.pe/linode2.sql
I don't understand, I'm not really seeing anything interesting in the SQL dumps, were they scrubbed of most of their rows? It looks like most of the tables are severely outdate/deprecated tables that were once used for testing but no more. E.g. users, customers, etc..
Re: Linode hacked again?
#16So I switched to Digital Ocean after the last Linode security fiasco and I can't say I regret it.
Should you decide to switch to another VPS provider I strongly recommend you cite the security problems when they ask you why you're closing your account. The only reliable way to get the security message across to technical managers and business people alike is to make it about money. That said the fact that this has happened, in this way, again to Linode is a very bad sign.
Having been in meetings, advocated for taking security seriously, and heard the rationalizations for a lax approach I can only say that as a customer if your desire for security isn't made crystal clear you have no hope of getting it. It has to be a deal breaker or not only will companies like Linode not learn, but their competitors who stand to gain from their loss won't either.
Re: Linode hacked again?
#17Looks like those credentials were disclosed in April of last year: http://turtle.dereferenced.org/~nenolod/linode/linode-abridg...
Something doesn't add up here. Surely Linode can't be that careless.
Re: Linode hacked again?
#18Does anyone have a better source? Update: I've gathered from chats on IRC here and there that this is a legitimate concern. Also: curl http://ra.pe/linode2.sql | grep --only-matching -E ".{8}your credit card number.{8}"
None of my info is in the file, and I was a customer before the previous hack.
Re: Linode hacked again?
#19So I switched to Digital Ocean after the last Linode security fiasco and I can't say I regret it. Should you decide to switch to another VPS provider I strongly recommend you cite the security problems when they ask you why you're closing your account. The only reliable way to get the security message across to technical managers and business people alike is to make it about money. That said the fact that this has ha…
Apparently the password has been reused. Search of password cfr41qa turned up results from almost a year ago https://www.google.com/search?q=cfr41qa
Re: Linode hacked again?
#20That's not exactly much evidence of a hack